[phplib] Sessions using HTTPS causes LOOP From: Matt Friedman (matt <email protected>)
Date: 10/27/00

PHP Version 4.0.2

I am using phplib sessions and cart.inc.
When using the regular http at webpipe.net, the pages I am writing work
fine.
When using the secure server, https, the pages go into some kind of client
server loop.

This only happens when using the session class of phplib. Other php pages
are ok.

It appears to be a header problem.

If you have seen this problem and know what to do, please let me know.

Thanks!
Code follows...
Here is some code that my explain what's happening (from session.inc)

  function release_token(){
    global $HTTP_COOKIE_VARS, $HTTP_GET_VARS, $HTTP_HOST, $HTTPS;
    if ( isset($this->fallback_mode)
    && ( "get" == $this->fallback_mode )
    && ( "cookie" == $this->mode )
    && ( ! isset($HTTP_COOKIE_VARS[$this->name]) ) ) {
      if ( isset($HTTP_GET_VARS[$this->name]) ) {
        $this->mode = $this->fallback_mode;
      } else {
        header("Status: 302 Moved Temporarily");
        $this->get_id($sid);
 $this->mode = $this->fallback_mode;
        if( isset($HTTPS) && $HTTPS == 'on' ){
        ## You will need to fix suexec as well, if you use Apache and CGI
PHP
          $PROTOCOL='https';
        } else {
          $PROTOCOL='http';
        }
        header("Location: ". $PROTOCOL. "://".$HTTP_HOST.$this->self_url());
        exit;
      }
    }
  }

---------------------------------------------------------------------
To unsubscribe, e-mail: phplib-unsubscribe <email protected>
For additional commands, e-mail: phplib-help <email protected>